Controller-less WLANs

Environment- This article is applicable on IAP running 4.1.1.0

Answer- Before IAP 4.1.1.0:
Mac address delimiter and case configuration was only allowed when MAC authentication was enabled
“User-Name” & “User-Password” were the only supported radius attributes

In 4.1.1.0:
Delimiter and case configuration is allowed for all authentication methods
Any radius attribute in Mac-address-format, such as calling-station-id, called-station-id will honor the new delimiter and case configuration

These commands are only available in CLI.
    
    configure terminal
    wlan ssid-profile <ssid>
     auth-pkt-mac-format delimiter :  
    (auth-pkt-mac-format upper-case delimiter -)
    end
    commit apply

“auth-pkt-mac-format delimiter :” means use colon for mac address delimiter.
“auth-pkt-mac-format upper-case delimiter -” means mac address is upper-case and delimiter is minus.


Before 4.1.1.0, there are 2 separate commands only for mac auth username and password.
    mac-authentication-delimiter           
    mac-authentication-upper-case  
In 4.1.1.0, a new command has been added       
    auth-pkt-mac-format { upper-case } { delimiter <delim> }

The two commands mac-authentication-delimiter & mac-authentication-upper-case have higher priority.  
Default format: lower case, no delimiter

Note:
This feature is not supported in accounting packets.

Related Links- https://arubanetworkskb.secure.force.com/pkb/articles/FAQ/Configurable-Address-Format-for-MAC-authentication-in-IAP